Dissertation > Excellent graduate degree dissertation topics show

Research on Defense of DDoS Attacks Against the DNS Server

Author: YuYuanZhi
Tutor: LiWeiMing
School: Huazhong University of Science and Technology
Course: Computer technology
Keywords: DNS server DDoS attack bloom filter source ip address forge
CLC: TP393.08
Type: Master's thesis
Year: 2011
Downloads: 74
Quote: 0
Read: Download Dissertation

Abstract


DNS server is one of the most important network infrastructure of the internet, almost all of the internet application relies on DNS server. DDoS Attacks against DNS server causes huge destructive and wide implications, so the prevention of such attacks is significant to guarantee the stability of the internet.After analysising of the attack process, we have two typical classes about the DDoS attack against the DNS server: DNS query attack and DNS amplitication attack. In these two types of attacks, the source ip address of the attack packets are forged in order to hide the attackers themselves and achieve better attack effect and so on. So the BH_Comp through detecting and filter the source ip address forge packets to protect the DNS Server.The BH_Comp uses bloom filter as a core data structure and hop count comparison as the detection method. Bloom filter can effectively reduce the storage space and the fixed storage can avoid the potential threat of the DDoS attacks on the dynamic storage structure. The the hop be used by hop count comparison is difficult forged by attackers, so it’s easy to create hop priori knowledge database to detect and filter source ip address forge packets to effective defense DDoS attacks.We use 46G traffic from the DNS server of the Central China Education Network during two weeks to test and prove the BH_Comp, and detect the source ip address forge packets is 1.5%. Through in-depth statistical annlysis of the results, we prove the hop of network packets has a certain degree of stability, determine the DNS server did not suffer DNS query attack, but find and confirm six DNS amplification attack using the DNS server as reflector. The detect results show BH_Comp is effective.

Related Dissertations

  1. The Research of Attack Source Traceback in Distributed Denial-of-Service Attacks Based on VoIP,TP393.08
  2. Efficient Update Methods for Multi-dimension Metadata Indexing in Storage Systems,TP333
  3. Research on Searching Strategy of Rare Items in Unstructured P2P Networks,TP393.02
  4. Grid Information Service Based on Chord and Bloom Filter,TP393.09
  5. Study on Duplication Detection of Data Streams,TP311.13
  6. Research on High-Speed IP Packet Capture Technology Based on Multi-core Architecture,TP393.08
  7. Flow-based self-similarity in IPv6 DDoS detection method,TP393.08
  8. Research and Application of Multi-Pattern Matching Engine Based on Bloom Filter,TP393.08
  9. Research on High-speed Network Flow Measurement Model,TP393.06
  10. Research of Relatived Alogorithm in the Network Congestion Control Field,TP393.06
  11. Study and Implementation on Distributed Hash Index Structure in P2P Environments,TP393.02
  12. Research on the Prevention of SYN Flood Attack Based on Turing Tests,TP393.08
  13. Research and Development of Performance Monitoring System for DNS Server in Campus,TP393.18
  14. Massive web collection system design,TP391.3
  15. Backbone network traffic statistics for the calculation of the aggregation,TP393.06
  16. Apply Exponential Smoothing Detection of Change-Point Method To Detecting TCP SYN-spoof Flooding Attack,TP393.08
  17. The Research of Trace Method of Abnormal Tcp Packets,TP393.08
  18. Analysis of Internet Access Pattern Based on the DNS Log,TP393.09
  19. Between the different types of data clustering algorithm,TP311.13
  20. Research of Detecting Method Against DDoS Attack Based on Behaviors of Network Traffic,TP393.08
  21. The Research of High-performance Multi-dimensional Packet Classification Algorithm,TP393.02

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net  Mobile